Phase 2: enforce deny-by-default AI egress controls - #64

Draft

hoang12122 wants to merge 8 commits into

mainfrom

agent/phase-2-ai-egress-control

Commits on Jul 27, 2026

docs: define phase 2 AI egress control contract
hoang12122
committed
4fd7d24
feat(security): add default-deny AI Kubernetes network policies
hoang12122
committed
b37ac7c
feat(security): add idempotent host firewall apply script
hoang12122
committed
215f7a6
feat(security): add controlled firewall rollback evidence
hoang12122
committed
9a4d624
test(security): add Phase 2 AI egress rejection and allowlist proof
hoang12122
committed
de60109
feat(security): remove runtime model download and isolate AI network
hoang12122
committed
e9b81c3
chore(ci): expose Phase 2 AI egress control test
hoang12122
committed
5ef4cbc
ci(security): add Phase 2 AI egress policy gate
hoang12122
committed
e205851